587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d

General

Target
587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d
Size 160KB
Sample260924-c2fbqayala
SHA256 587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d
MD5 e04d1ec76546cea77d1c867437832fc4
SHA1 29eb12bc8081a078978bd469957d675f59e4e797
SHA512 68033328682e8fca414da59020cf1b51bb3f1aa58c76832d029006c86d0960602f90693cf059a73d38354ccd8664bd8d60f93aca134a261ff6353632cd368f0c
SSDEEP 3072:wIEHkjfunRd07YZM/WrYUMRgqxMcyWuR3xP87NBCP:wm7q3ZM/Cd5FuNA
TLSH
T17AF36B1BB2A500BBE06BD438C5931A06EB76741507619FEF03A0427A2F777D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d

File Explorer

587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d

.dll 160KB

587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d

IMPHASH bd05c08882f2ccfb9fa3ed36bddd006d
SHA256 587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d
MD5 e04d1ec76546cea77d1c867437832fc4
SHA1 29eb12bc8081a078978bd469957d675f59e4e797
SHA512 68033328682e8fca414da59020cf1b51bb3f1aa58c76832d029006c86d0960602f90693cf059a73d38354ccd8664bd8d60f93aca134a261ff6353632cd368f0c
SSDEEP 3072:wIEHkjfunRd07YZM/WrYUMRgqxMcyWuR3xP87NBCP:wm7q3ZM/Cd5FuNA
TLSH
T17AF36B1BB2A500BBE06BD438C5931A06EB76741507619FEF03A0427A2F777D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

30648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

bcrypt

BCryptOpenAlgorithmProvider BCryptCreateHash BCryptHashData BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptFinishHash BCryptGetProperty

kernel32

EncodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle ReadFile GetFileSizeEx VirtualProtect VirtualFree GetCurrentProcess WriteFile VirtualAlloc GetModuleFileNameW CreateFileW GetFileAttributesW Sleep GetTickCount64 GetLastError DeleteFileW CloseHandle LoadLibraryW CreateThread GetCurrentDirectoryW MoveFileExW FlushInstructionCache FlushFileBuffers DisableThreadLibraryCalls HeapReAlloc HeapSize GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType

user32

GetKeyState

Sharing

General

Malware Config

Signatures

File Explorer

587204f18bf7c2eca871368eecdab990c4a6d7551864a79c1edc951db7adc31d

bcrypt

kernel32

user32

generic